summaryrefslogtreecommitdiff
path: root/src/etc/systemd/system/isc-kea-dhcp4-server@.service
diff options
context:
space:
mode:
authorsarthurdev <965089+sarthurdev@users.noreply.github.com>2025-09-22 22:54:08 +0200
committersarthurdev <965089+sarthurdev@users.noreply.github.com>2025-09-23 09:07:09 +0200
commit99b032b017fc207371acff9bf271f29efe25aa66 (patch)
tree116077c9fa8363d9abc26ab0aded64107d586aae /src/etc/systemd/system/isc-kea-dhcp4-server@.service
parentf2f2d3c0f0c8f6772f4f24b4bd7203837c1afed9 (diff)
downloadvyos-1x-99b032b017fc207371acff9bf271f29efe25aa66.tar.gz
vyos-1x-99b032b017fc207371acff9bf271f29efe25aa66.zip
kea: T7821: Update paths for Kea v2.7.9 security changes
Diffstat (limited to 'src/etc/systemd/system/isc-kea-dhcp4-server@.service')
-rw-r--r--src/etc/systemd/system/isc-kea-dhcp4-server@.service7
1 files changed, 5 insertions, 2 deletions
diff --git a/src/etc/systemd/system/isc-kea-dhcp4-server@.service b/src/etc/systemd/system/isc-kea-dhcp4-server@.service
index f63364275..155333359 100644
--- a/src/etc/systemd/system/isc-kea-dhcp4-server@.service
+++ b/src/etc/systemd/system/isc-kea-dhcp4-server@.service
@@ -7,15 +7,18 @@ After=vyos-router.service
[Service]
User=_kea
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_RAW
+Environment="KEA_DHCP_DATA_DIR=/config/dhcp"
+Environment="KEA_HOOK_SCRIPTS_PATH=/usr/libexec/vyos/system"
Environment="KEA_LOCKFILE_DIR=/run/lock/kea"
ConfigurationDirectory=kea
+ConfigurationDirectoryMode=0750
RuntimeDirectory=kea lock/kea
RuntimeDirectoryPreserve=yes
LogsDirectory=kea
LogsDirectoryMode=0750
StateDirectory=kea
-ExecStart=sudo /bin/ip vrf exec %i /usr/sbin/kea-dhcp4 -c /run/kea/kea-%i-dhcp4.conf
-ExecStartPost=/bin/sh -c 'sleep 10 && sudo /usr/bin/chown _kea:_kea /run/kea/dhcp4-%i-ctrl* && sudo /usr/bin/chown _kea:_kea /run/kea/kea-%i-dhcp4* && sudo /usr/bin/chown _kea:_kea /run/kea/logger_lockfile'
+ExecStart=sudo /bin/ip vrf exec %i /usr/sbin/kea-dhcp4 -c /var/run/kea/kea-%i-dhcp4.conf
+ExecStartPost=/bin/sh -c 'sleep 10 && sudo /usr/bin/chown _kea:_kea /var/run/kea/dhcp4-%i-ctrl* && sudo /usr/bin/chown _kea:_kea /var/run/kea/kea-%i-dhcp4* && sudo /usr/bin/chown _kea:_kea /run/kea/logger_lockfile'
Restart=on-failure
[Install]